FWCore

How to enable logging in 3x-ui?

Wed, 31 Dec 2025 09:38:17 +0000

I want to enable logging for a proxy hosted with 3x-ui, how do I do that?

Abuse InfinityFree to Host Web Proxies for General Browsing

Sun, 28 Dec 2025 02:20:39 +0000

It won’t be as secure, fast, or private as VLESS, VMess, etc., but if you really can’t get a client, this might work.

YOU HAVE BEEN WARNED

Things You Need

Email
Computer (a phone can be used, but it’s harder)
A good internet connection
A cup of coffee (optional ☕)

1. Download PHP-Proxy

Open this link: https://www.php-proxy.com

Then click the link under this text:

For those who do not have access to shell, for example, people on a shared hosting environment, would need to download a pre-installed version of php-proxy, and then upload it to their web-server.

Download the pre-installed ZIP file.

Best proxy cores to use right now

Sat, 27 Dec 2025 12:53:01 +0000

Best Proxy Cores Right Now

1. Sing-box

Sing-box is a newer core with support for many protocols. However, when using the native apps on macOS and iOS, it is very difficult to configure. It’s better to use Sing-box through clients like v2rayN and Throne.

Apparently, it does not support XTLS Reality, as it is closed source.

2. Xray

Xray is a fork of the V2Ray core with XTLS Reality support added. However, it does not support Hysteria 2. This is a good core to use if you rely on XTLS Reality Vision.

Speed Up GitHub in China

Sat, 27 Dec 2025 12:10:04 +0000

To speed up GitHub in China, you have a few options:

For raw content, some repositories provide a jsDelivr API, but it’s not guaranteed and updates less frequently.
You can also clone the content onto Gitee, but this is subject to censorship.
Another option is modifying your hosts file, which we’ll focus on today. This allows you to access GitHub more easily. Downloads may still be slow, but at least you can access GitHub and use additional methods to speed up downloads.

1. Edit Your Hosts File

Open your hosts file:

About FWCore

Sat, 27 Dec 2025 00:00:00 +0000

FWCore (Firewall Core) is a forum focused on the technical aspects of blocking sites with firewalls, including platforms like Fortinet and national firewalls such as the Chinese GFW and Iran’s filtering systems.

Guidelines:

Keep discussion technical; please avoid politics.
You may ask for support, but share only non-sensitive details.
Be respectful and keep conversations constructive.

Community Rules

Sat, 27 Dec 2025 00:00:00 +0000

Welcome to FWCore. Please follow these default rules:

Stay respectful: no harassment, hate speech, or personal attacks.
Keep posts on-topic: align with FWCore themes and avoid spam.
No sensitive data: don’t post secrets, personal info, or private logs.
Cite sources when sharing claims or news.
Use tags wisely: tag posts so readers can find them.
One account per person; no impersonation.
Moderation decisions are final; appeal politely if needed.
Reports: flag issues via the moderation channel or contact mods directly.

Thanks for keeping the forum useful and safe.

Introduction to GFWMass

Sat, 27 Dec 2025 00:00:00 +0000

What is GFWMass?

GFWMass is a script that automates deploying up to 1,000 links to a single proxy.

This can help increase the spread of proxies so a firewall is less likely to flag you for visiting one host repeatedly.

Architecture

Client → Cloudflare (cdn-47fh.example.com) → Caddy → Xray/VLESS → Internet
         Cloudflare (signup-hf33.example.com) ↗
         Cloudflare (api-92kl.example.com) ↗
         ... (hundreds more)

It generates realistic subdomains that represent real services.
Adds them to Cloudflare via API and enables proxies so your origin IP stays hidden.
Caddy handles TLS from Cloudflare using a wildcard certificate from certbot (can be replaced with Cloudflare origin certs if needed).
Xray/VLESS over WebSocket (WS): single VLESS+WS endpoint serving all domains.
Provides a subscription.txt with base64-encoded VLESS links for all generated domains.

Prerequisites

A VPS with port 443 open.
A domain name with Cloudflare DNS (a free one from digiplat works).
Git installed and root access.
Debian-based distro preferred (not tested on others).

Steps to deploy GFWMass

Posting Guide

Sat, 27 Dec 2025 00:00:00 +0000

Quickstart (do these every time):

Prepare your Markdown: clear title + short first paragraph (used as summary).
Add your GitHub profile in the submit form so giscus shows your identity.
Run the proof-of-work step; it may take ~2 minutes.
Use 2–4 tags so readers can find your post.
Expect moderation; posts queue until approved.

Quality and moderation tips:

Title: concise and descriptive; avoid clickbait.
Body: start with a one- to two-sentence summary, then details.
Tags: 2–4 relevant tags, lowercase.
Links: prefer primary sources; add brief context for each link.
Sensitive info: do not include secrets, personal data, or private logs.

Submit a Post

Sat, 27 Dec 2025 00:00:00 +0000

Your GitHub account is used for identity in giscus comments. Please include your GitHub profile link so readers can recognize you. All fields except tags are required. Submissions now require a short proof-of-work (PoW) before sending; it may take ~2 minutes depending on hardware.

You Don't Need Reality

Sat, 27 Dec 2025 00:00:00 +0000

Why?

Technically any proxy protocol that uses TLS can SNI-spoof by presenting a self-signed cert for any domain. It will lack the padding of XTLS Reality flow, but if you need the characteristics of another proxy protocol, SNI spoofing without Reality is still possible.

The one I recommend is Naive Proxy; it uses the Chromium stack, so the handshake is very close to a real browser.

But it depends on your threat model: if you are worried about deep packet inspection, Reality is still better because it adds padding and obfuscation to the traffic.

Search

Mon, 01 Jan 0001 00:00:00 +0000